Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.mft
File:                     319d5f20-2367-457b-970b-7f1c1a60fcae.mft (raw, json)
Hash identifier:          4UYs/izkf7n2H7+WiBkUQLipzpvy07PRseYDzmt1IMo=
Subject key identifier:   74:B5:A3:22:18:3C:96:6B:97:9D:33:75:C8:DF:0D:9A:FC:0F:12:F3
Authority key identifier: 9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B
Certificate issuer:       /CN=319d5f20-2367-457b-970b-7f1c1a60fcae
Certificate serial:       010D0C9F43285848B9FC7CAB5BCEBE73B794BB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.mft
Manifest number:          010D0C9F4328584073A850A03AAC4715A1FD2D08
Signing time:             Fri 31 Jan 2025 11:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 11:00:00 +0000
Files and hashes:         1: 3139829a-5e22-379a-8ff7-d4b23faacffe.roa (hash: By83RtKWfzRLl1GvNDdkQAFlt+91OhubaTofCe/Iy6k=)
                          2: 319d5f20-2367-457b-970b-7f1c1a60fcae.crl (hash: hoqRp9UPyhXzpBBoMytATMop0d93QbN5WV1Gz3BIf0I=)
                          3: cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa (hash: FBQAjAaFD/WmPaEGQfOPJkgpf3RC4SJIY+CO2UuLfpI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b9:fc:7c:ab:5b:ce:be:73:b7:94:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319d5f20-2367-457b-970b-7f1c1a60fcae
        Validity
            Not Before: Jan 31 11:00:07 2025 GMT
            Not After : Feb  3 11:00:00 2025 GMT
        Subject: CN=3bb2a72a-a1ea-4025-aa8a-802b8ddd0fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:c8:b3:7f:56:0e:21:0e:7d:00:c6:1f:a0:
                    3e:d2:fe:50:59:44:d8:20:37:79:33:d3:00:79:f4:
                    ed:b3:eb:6a:78:69:8e:9b:94:d7:2c:5f:a7:b8:72:
                    99:df:29:1e:9b:54:03:18:6a:0e:38:e8:4f:fd:4d:
                    f9:f7:9b:e0:49:85:38:9c:f1:50:2e:a7:7c:d3:bd:
                    1c:8b:24:2f:1f:7b:2b:c7:35:53:10:c3:6f:e2:91:
                    c1:60:0c:b0:52:5e:3a:c3:5d:95:54:df:6d:5b:9f:
                    d9:db:e7:30:94:9f:26:cc:63:bf:d3:29:bc:40:0b:
                    1c:32:7e:ba:92:6c:c3:6a:03:02:c1:d9:37:48:e1:
                    39:5e:c0:ed:93:7d:a9:9f:49:20:c2:78:d4:54:d8:
                    e9:83:ef:77:27:a9:72:f8:aa:9c:a9:b4:f5:d1:ce:
                    48:83:8b:0b:9e:40:67:de:bf:07:e7:c3:99:b4:c9:
                    9f:9b:0f:9d:b1:8a:ca:70:3c:03:b5:90:bc:b1:a4:
                    58:e0:0e:07:c7:eb:9b:ce:e2:0e:68:26:22:76:11:
                    d6:73:c4:94:80:76:c4:77:72:56:52:45:72:2c:a9:
                    fc:fd:73:f1:8e:99:fb:ee:11:e9:9e:b0:f5:98:51:
                    0b:ba:84:74:58:8b:e7:47:a1:9c:1e:6d:d4:ce:88:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B5:A3:22:18:3C:96:6B:97:9D:33:75:C8:DF:0D:9A:FC:0F:12:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl

            X509v3 Authority Key Identifier:
                keyid:9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:98:56:45:69:ea:1b:23:66:cc:e4:e7:d9:4d:46:99:69:ad:
         cd:37:de:f2:08:54:e1:fb:32:0d:53:51:cb:c6:00:bc:82:f7:
         9e:fd:b8:84:dd:b4:c8:ec:4f:5b:97:8f:0a:9c:56:e9:76:f9:
         bb:a6:10:3e:0e:0a:e8:6c:06:68:41:ad:d0:97:ea:5f:e7:f5:
         fd:ec:96:af:b5:13:df:2b:24:d5:bf:75:db:76:72:a1:e9:7f:
         e7:3d:57:f9:f0:48:c6:78:a8:38:1b:a6:83:5f:32:20:77:69:
         b5:51:17:d7:85:21:6c:52:69:e2:10:ae:be:fd:cd:5a:eb:b4:
         95:d2:fa:59:fa:a0:be:f2:8c:0f:cf:b7:99:c8:2d:46:da:34:
         33:80:d0:12:e5:e4:11:78:9a:71:f8:79:18:b2:c4:94:12:43:
         3f:7a:f0:6b:da:d0:2b:f4:d1:b3:5f:2d:43:91:54:40:ae:9b:
         4e:60:a7:05:ba:80:a3:22:a4:79:11:b8:5b:61:b0:cd:56:f0:
         ed:55:42:2f:27:b4:73:4b:38:c0:21:38:30:db:0b:b4:33:40:
         15:c8:00:3b:44:d6:29:6c:93:35:df:73:1b:96:3d:7c:aa:78:
         46:9e:44:eb:0d:be:2e:74:f7:81:e8:52:a8:0d:14:59:84:00:
         7a:67:fc:7c
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEi5/HyrW86+c7eUuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE5ZDVmMjAtMjM2Ny00NTdiLTk3MGItN2YxYzFhNjBm
Y2FlMB4XDTI1MDEzMTExMDAwN1oXDTI1MDIwMzExMDAwMFowLzEtMCsGA1UEAxMk
M2JiMmE3MmEtYTFlYS00MDI1LWFhOGEtODAyYjhkZGQwZmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4bIs39WDiEOfQDGH6A+0v5QWUTYIDd5M9MA
efTts+tqeGmOm5TXLF+nuHKZ3ykem1QDGGoOOOhP/U3595vgSYU4nPFQLqd8070c
iyQvH3srxzVTEMNv4pHBYAywUl46w12VVN9tW5/Z2+cwlJ8mzGO/0ym8QAscMn66
kmzDagMCwdk3SOE5XsDtk32pn0kgwnjUVNjpg+93J6ly+KqcqbT10c5Ig4sLnkBn
3r8H58OZtMmfmw+dsYrKcDwDtZC8saRY4A4Hx+ubzuIOaCYidhHWc8SUgHbEd3JW
UkVyLKn8/XPxjpn77hHpnrD1mFELuoR0WIvnR6GcHm3UzoiNLQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFHS1oyIYPJZrl50zdcjfDZr8DxLzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlk
NWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFjMWE2MGZjYWUvMzE5ZDVmMjAtMjM2Ny00
NTdiLTk3MGItN2YxYzFhNjBmY2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzE5ZDVmMjAtMjM2Ny00NTdiLTk3
MGItN2YxYzFhNjBmY2FlLzMxOWQ1ZjIwLTIzNjctNDU3Yi05NzBiLTdmMWMxYTYw
ZmNhZS5jcmwwHwYDVR0jBBgwFoAUnFErFXqHY+TuXE7m8ya3OGcc4kswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTlkNWYyMC0yMzY3LTQ1N2ItOTcwYi03ZjFj
MWE2MGZjYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6mFZFaeobI2bM5OfZTUaZ
aa3NN97yCFTh+zINU1HLxgC8gvee/biE3bTI7E9bl48KnFbpdvm7phA+DgrobAZo
Qa3Ql+pf5/X97JavtRPfKyTVv3XbdnKh6X/nPVf58EjGeKg4G6aDXzIgd2m1URfX
hSFsUmniEK6+/c1a67SV0vpZ+qC+8owPz7eZyC1G2jQzgNAS5eQReJpx+HkYssSU
EkM/evBr2tAr9NGzXy1DkVRArptOYKcFuoCjIqR5EbhbYbDNVvDtVUIvJ7RzSzjA
ITgw2wu0M0AVyAA7RNYpbJM133Mblj18qnhGnkTrDb4udPeB6FKoDRRZhAB6Z/x8
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:25 2025 by rpki-client